huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 42.56.35.3 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-26 |
| 167.148.88.198 United States · Wave Broadband | files | COM | 1 | 2026-10-26 |
| 82.27.71.218 Germany · Wave Broadband | files | COM | 1 | 2026-10-26 |
| 167.148.88.191 United States · Wave Broadband | files | COM | 1 | 2026-10-26 |
| 104.21.90.13 United States · Cloudflare, Inc. | files | CC | 1 | 2026-10-26 |
| 172.67.193.78 United States · Cloudflare, Inc. | files | CC | 1 | 2026-10-26 |
| 104.21.47.247 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-10-26 |
| 52.128.241.77 Hong Kong · Netsec Limited | malware mozi c2 exposed-secret | PY, PS1, PE, GO | 257 | 2026-10-26 |
| 198.204.230.122 United States · Nocix, LLC | malware elf-binary | ELF, LOG | 2 | 2026-10-26 |
| 103.35.216.13 Indonesia · Politeknik Pelayaran Surabaya | exposed-secret exploit | TXT, ENV, JSON, PHP | 16 | 2026-10-26 |
| 213.177.179.14 United Arab Emirates · Feo Prest SRL | exposed-secret | BIN, TXT | 2 | 2026-10-26 |
| 18.141.182.202 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-26 |
| 64.177.53.67 United States | files | TXT | 1 | 2026-10-26 |
| 153.120.78.94 Japan · SAKURA Internet Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 153.126.178.245 Japan · SAKURA Internet Inc. | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 67.219.101.87 Australia · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 172.232.224.166 Indonesia · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 192.46.237.53 Germany · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 172.233.15.100 Brazil · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 192.121.47.198 Italy · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 172.232.96.96 India · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 188.165.58.213 France · OVH SAS | exposed-secret | TXT | 1 | 2026-10-26 |
| 116.205.108.183 China · Huawei Cloud Service data center | exposed-secret | JSON, PHP, TXT | 3 | 2026-10-26 |
| 159.75.168.47 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-26 |
| 101.43.120.111 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-26 |
| 143.42.229.113 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 111.229.34.184 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-26 |
| 47.98.107.58 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-26 |
| 43.153.226.8 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-26 |
| 172.232.186.145 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 54.189.204.103 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 18.118.49.202 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 49.51.187.50 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 54.193.79.170 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 96.126.126.115 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 195.88.57.175 United States · Kamatera, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 87.98.155.18 France · OVH SAS | files | PHP | 1 | 2026-10-26 |
| 113.207.49.121 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-10-26 |
| 43.211.67.252 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-26 |
| 43.210.115.207 Thailand · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 2 | 2026-10-26 |
| 13.208.243.131 Japan · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 108.136.234.225 Indonesia · Amazon.com, Inc. | exposed-secret | TXT, ENV | 5 | 2026-10-26 |
| 111.229.152.16 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-26 |
| 103.90.162.31 United States · Kamatera, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-26 |
| 13.239.253.213 Australia · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-26 |
| 121.5.176.144 China · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-26 |
| 45.115.26.30 Vietnam · Contrust Solutions S.R.L. | exposed-secret exploit malware mozi | LOG, PY, SH, TXT | 1,395 | 2026-10-26 |
| 45.76.5.143 United States · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-26 |
| 45.115.26.155 Hong Kong · Contrust Solutions S.R.L. | exposed-secret | TXT | 1 | 2026-10-26 |
| 130.61.8.0 Germany · Oracle Corporation | exposed-secret tunnel | TXT | 1 | 2026-10-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free